![Need a Scalable Security Solution for Your Hardware Security Modules [HSM]? - cover graphic](/_next/image/?url=https%3A%2F%2Fcdn.venafi.com%2F994513b8-133f-0003-9fb3-9cbe4b61ffeb%2Faf0f89af-de3b-4552-9917-ffc33665ad03%2Faid_field_img__74c399e5d0e36e5c29090a84eb16cd35.jpg%3Fw%3D864%26h%3D370%26fm%3Dwebp%26q%3D75%26fit%3Dcrop&w=3840&q=75&dpl=dpl_BHtzFuj7x8fHcssjFHrhmmifkwhC){kind=small}
A few weeks ago, Venafi introduced Advanced Key Protect, an add-on module for the Venafi Platform that integrates with HSMs to provide strong keys and key storage. This new module integrates the Venafi Platform with Thales and Gemalto HSMs, and provides tremendous value to organizations who currently use products from either company.
HSMs provide the strongest key generation on the market. These keys are generated with high entropy, also referred to as randomness, and they are more difficult to break than keys generated by other means. I see this as more options for customers to choose the level of security they require.
Additionally, Advanced Key Protect can also use the HSM for key storage. Many customers have difficulties maintaining keys that are used to generate certificates because they are often stored in flat files with the applications themselves. Customers have long used the Venafi Platform to centrally store and manage keys so they aren’t vulnerable to accidental deletion, copying, and are easier to revoke and replace quickly if necessary. With Advanced Key Protect, customers can now use their HSMs to generate and store keys securely – the keys never leave the HSM.
I had a wonderful conversation with my counterpart at Thales last week at RSA (disclaimer, he’s also an old friend) and he mentioned how wonderful this new product was to our mutual customers. It truly does extend the value of the security infrastructure our customers have already purchased. What’s more is that Venafi chose to integrate with leading HSMs rather than build another solution in-house to reduce the amount of disparate solutions our customers have. Integration is key to building a best-in-breed security solution.
Although this new module requires the Venafi Platform and either a Thales or Gemalto HSM, it provides tremendous value to existing customers who currently own both products. If you are an HSM owner and want to learn more about Venafi products, please don’t hesitate to set up a call.
Find out why you need machine identity management
Related blogs